$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa File: 4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa (raw, json) Hash identifier: I5qSbwZzBlJGOAANtKEzdjFBiupWyI5Gb3iysO09tsE= Subject key identifier: 91:D3:B3:31:B8:14:3C:EC:2C:20:AF:10:DF:76:23:A6:33:CC:10:54 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AFEE6AC32EA227330B36FB540 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 29802 IP address blocks: 23.230.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:ac:32:ea:22:73:30:b3:6f:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=d6a33472-661c-426b-b6da-d95813206270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:1f:2c:85:00:e1:32:46:ba:aa:ae:f0:07: 8b:2a:e0:a5:57:a5:ef:b5:21:bd:de:e0:11:69:82: 18:52:bf:27:7d:74:a8:43:aa:7c:b6:2a:3c:14:e7: 52:97:00:e2:b7:80:d1:04:c7:ee:a8:ad:c6:06:75: de:a9:3a:19:e4:23:ee:5f:8e:f6:dc:62:a0:5c:e8: 3a:a3:8c:4d:7a:66:54:56:58:cf:12:47:4f:41:d8: d1:7c:3d:76:eb:93:56:45:b9:c6:1c:ea:15:2c:df: b2:94:c8:22:76:5b:fc:b1:0f:96:42:c4:9a:55:cd: 17:2a:eb:a5:fa:df:7b:96:b8:d1:ed:b9:ac:04:96: ae:67:26:bb:ff:5b:9b:9b:15:bc:71:c1:0b:b1:33: 72:c8:86:fd:f3:67:54:37:9e:87:ad:b8:d0:fb:2c: cf:12:22:33:50:1b:e0:25:05:73:7a:80:7b:dd:7e: b7:79:41:de:37:04:e5:d0:1c:95:f3:d7:95:03:88: 93:ee:1e:c3:86:b5:97:1f:93:df:1d:40:cc:50:7d: 8b:7c:cc:a9:4e:1b:8b:94:a6:48:c3:fb:e5:5b:59: a4:1d:f6:01:73:fa:61:11:7c:c8:b8:f5:7d:52:52: 7e:c8:5c:fa:f3:53:67:c3:b1:a4:42:0d:5e:66:51: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D3:B3:31:B8:14:3C:EC:2C:20:AF:10:DF:76:23:A6:33:CC:10:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0d:d4:39:47:41:85:6b:1a:92:d5:e0:11:4a:b3:91:39:84: d0:0b:6a:d8:54:7f:0c:b6:f8:3d:b6:1e:a4:47:09:0f:6d:af: c7:02:33:27:1d:8f:2d:f1:83:5e:b2:41:0e:81:0a:9b:65:11: e5:e9:d9:5c:bb:6d:c5:b4:6a:de:ff:94:ad:f1:92:94:79:c0: ef:34:ad:0e:80:ed:92:c8:44:bf:19:f4:2c:92:ff:79:11:b3: f1:4a:25:95:cd:0c:d1:4e:08:88:55:17:86:03:87:2d:da:53: 13:c3:26:3a:66:f8:d3:01:16:f4:bb:5d:07:a8:2a:19:20:a0: 64:ee:e9:9d:e0:27:76:75:cf:2f:71:9e:7b:df:1d:38:95:62: 4e:82:41:5f:b5:96:46:31:45:07:69:96:e7:59:49:5e:45:f6: 58:94:1a:7c:af:7a:ec:cc:26:92:60:41:ef:77:cd:bc:b4:4f: 55:ae:77:28:e5:d8:a3:70:51:94:4b:c4:f8:74:b0:ec:93:e4: 13:9a:e7:13:99:e9:83:bf:ef:81:6a:54:8d:d3:b2:1a:4b:87: a0:ae:34:84:f1:66:03:92:7d:9e:2f:c6:89:32:4f:00:88:95: d1:c6:62:fc:b9:de:a2:ff:a8:e6:99:b3:f1:25:e9:93:37:f8: 0a:fd:2c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qwy6iJzMLNvtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDZhMzM0NzItNjYxYy00MjZiLWI2ZGEtZDk1ODEzMjA2MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYfLIUA4TJGuqqu8AeLKuClV6XvtSG93uAR aYIYUr8nfXSoQ6p8tio8FOdSlwDit4DRBMfuqK3GBnXeqToZ5CPuX4723GKgXOg6 o4xNemZUVljPEkdPQdjRfD1265NWRbnGHOoVLN+ylMgidlv8sQ+WQsSaVc0XKuul +t97lrjR7bmsBJauZya7/1ubmxW8ccELsTNyyIb982dUN56HrbjQ+yzPEiIzUBvg JQVzeoB73X63eUHeNwTl0ByV89eVA4iT7h7DhrWXH5PfHUDMUH2LfMypThuLlKZI w/vlW1mkHfYBc/phEXzIuPV9UlJ+yFz681Nnw7GkQg1eZlG2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHTszG4FDzsLCCvEN92I6YzzBBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGE4YmUzY2YtOWEyZi0z ZWQzLWE5NjAtNzY3Y2M2ZjVmODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+bpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgN1DlHQYVrGpLV4BFKs5E5hNALathUfwy2+D22HqRHCQ9tr8cCMycd jy3xg16yQQ6BCptlEeXp2Vy7bcW0at7/lK3xkpR5wO80rQ6A7ZLIRL8Z9CyS/3kR s/FKJZXNDNFOCIhVF4YDhy3aUxPDJjpm+NMBFvS7XQeoKhkgoGTu6Z3gJ3Z1zy9x nnvfHTiVYk6CQV+1lkYxRQdpludZSV5F9liUGnyveuzMJpJgQe93zby0T1Wudyjl 2KNwUZRLxPh0sOyT5BOa5xOZ6YO/74FqVI3TshpLh6CuNITxZgOSfZ4vxokyTwCI ldHGYvy53qL/qOaZs/El6ZM3+Ar9LF8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:23 2025 by rpki-client